[Python] crypto/fips/fips.c:154: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE While K8S...

Our python based microservice application running in K8S uses base image as created on the top of (RHEL) 9. As we have to use fips enabled container image and to work properly with openssl configuration we had added command "update-crypto-policies --set FIPS:NO-ENFORCE-EMS " as part of dockerfile startup. Now container is not coming up & we are getting error

crypto/fips/fips.c:154: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE


I'm not certain what's causing the error, but I suspect it might be related to a Python library that we build, copy, and install in our Dockerfile. Could an installed library be responsible for this issue, or is it more likely a platform-level problem rather than something caused by the libraries we package in the Docker container? Mismatch of openssl version in container and host should not cause this.

Sharing container startup output:

FIPS mode is enabled.
update-crypto-policies --show
FIPS
openssl version
OpenSSL 3.2.2 4 Jun 2024 (Library: OpenSSL 3.2.2 4 Jun 2024)
setting FIPS:NO-ENFORCE-EMS
Error setting the current policy configuration
Setting system policy to FIPS:NO-ENFORCE-EMS
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
crypto/fips/fips.c:154: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE


Please help to fix the issue.

TIA

Continue reading...